As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
If this question can be reworded to fit the rules in the help center, please edit the question.

Making sure to get your Akismet account setup right away, or potentially use a system like Disqus to manage your comments. There are plenty of "war dialers" out there looking for fresh WordPress installs so they can start spamming your comments.

Related to this might be how to keep an eye out for spam comments that still make it through. The bots are getting more sophisticated in their wording to sound human, but there are still a few things (like checking the e-mail address used for the comment) that can indicate spam comments from real ones.